audit accesses to staticiforme

now that a bunch of sites have been moved off staticiforme into the static-shim, we may be able to revoke some accesses on that busy server.